Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/m4nqrnzJ72d43vkmbNQsTsB-lGQ.roa
File: m4nqrnzJ72d43vkmbNQsTsB-lGQ.roa (raw, json)
Hash identifier: zcjIpGeJWP/Xbgzu7RV6e8J35GNeiKe3PTsxTb48PMo=
Subject key identifier: 9B:89:EA:AE:7C:C9:EF:67:78:DE:F9:26:6C:D4:2C:4E:C0:7E:94:64
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018C01F98F506EE810AD444BD861068EA6EC
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/m4nqrnzJ72d43vkmbNQsTsB-lGQ.roa
Signing time: Fri 24 Nov 2023 15:36:21 +0000
ROA not before: Fri 24 Nov 2023 15:36:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.216.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
83.147.244.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:01:f9:8f:50:6e:e8:10:ad:44:4b:d8:61:06:8e:a6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Nov 24 15:36:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b89eaae7cc9ef6778def9266cd42c4ec07e9464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ad:65:cb:61:df:41:5f:24:75:c8:42:a6:41:
83:56:f0:9c:85:15:de:bb:e2:4c:15:6b:19:14:7c:
57:5a:c6:5f:8b:1a:cf:e3:ba:be:52:c1:1a:07:8f:
16:9d:c2:54:1b:3b:10:ce:3a:2b:89:f2:ed:c4:26:
49:c9:ad:e1:6a:e1:b3:c6:41:67:c6:98:54:74:b7:
89:e2:60:15:fc:ef:c7:20:6f:97:48:c8:d8:83:9a:
35:28:bd:60:ba:e2:de:25:4f:f9:99:57:a6:bd:87:
8c:ae:9f:15:29:4e:a5:75:46:6d:f0:61:d8:75:70:
b3:90:c8:68:64:7e:a8:51:ef:0c:ff:68:0c:fb:56:
f0:a4:01:82:0e:04:45:c1:80:4b:d4:47:e2:9d:df:
21:00:ea:8a:dd:93:c5:89:7c:e8:22:9d:73:e4:fa:
70:bc:dc:e6:ed:b0:4b:f7:ed:34:6a:47:23:8e:3c:
ee:97:8c:6d:95:44:04:27:47:ae:6d:d9:d9:c3:b5:
0b:df:71:41:2a:71:a6:64:d3:80:bd:85:96:1a:da:
6d:5d:41:fe:5c:46:f0:21:2c:89:46:64:0b:7c:cd:
3b:ba:8c:a4:b7:fa:21:2c:b3:00:5a:5f:75:14:ed:
46:77:89:8a:bf:eb:62:fc:5b:cb:ba:bc:2d:cc:df:
d4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:89:EA:AE:7C:C9:EF:67:78:DE:F9:26:6C:D4:2C:4E:C0:7E:94:64
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/m4nqrnzJ72d43vkmbNQsTsB-lGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
83.147.252.0/22
91.186.216.0/22
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
70:be:ae:0c:22:49:9c:0d:f0:70:a3:83:7e:e6:a9:6e:cf:f6:
1d:44:36:73:89:67:94:cd:6d:99:65:4d:63:48:29:43:12:15:
28:22:e0:de:02:18:22:6c:19:cd:be:9a:2b:6e:6e:aa:31:52:
74:bd:d3:a9:6e:67:3f:0e:46:0a:8a:48:40:7c:7a:1f:5b:68:
5d:b4:b7:cd:22:2d:77:86:83:3c:02:ea:ba:20:2a:ef:73:e4:
b6:85:75:d9:07:45:6c:4f:b3:a7:9d:ec:d1:71:f7:ee:c3:6b:
ec:91:79:c1:1a:28:a9:94:b4:03:e3:32:7a:8b:ea:89:63:19:
0e:bb:ed:2a:d1:e4:0e:c4:48:b3:6a:dd:f8:f9:06:ac:a1:c5:
d5:8c:73:da:94:7a:a1:57:37:c1:7e:af:87:13:09:dc:77:2c:
ad:b0:ee:61:6d:36:d2:bb:86:6f:1c:42:06:d0:2b:f4:d0:a7:
65:cc:4b:c3:03:d2:0d:56:b6:6d:21:d9:cc:f9:6b:88:35:48:
72:ca:27:ae:a1:1a:c9:fe:14:ce:4c:85:bb:90:39:c7:6a:81:
86:02:f8:b8:97:64:ac:96:0c:dd:68:7f:b7:55:0c:9d:4f:46:
68:16:06:b5:0b:9a:ee:bb:63:32:76:3e:d3:c6:ca:1a:94:f9:
b4:19:80:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:28 2024 by rpki-client on console-fra.rpki-client.org